Add the OpenSpec proposal, design, tasks, and requirements for an app-ensured tenant resolved by natural key instead of configured UUIDs. Align FedWiki, entitlement, and provider lifecycle specs around active and non-active site states, and record related operator UX follow-ups.